基于数字证书识别及校验的物联网固件安全检测系统的设计与实现

Design and implementation of Internet of Things firmware security detection system based on digital certificate identification and verification

设计并实现了一种基于数字证书识别及校验的物联网固件安全检测系统。针对下载的不同厂商的固件,研究了在固件中识别公钥、私钥、签名等数字证书文件的方法,设计了对证书内容进行有效性校验的模型,构建了证书管理数据库,在此基础上实现了完整的固件安全检测系统。实验结果表明,该系统可对固件中的证书进行高效识别和有效性校验,并对样本外存在数字证书安全缺陷的固件进行了成功检测。

A security detection system for Internet of Things firmware based on digital certificate identification and verification is designed and implemented.For the firmware download from different vendors,this paper studies the method of identifying digital certificate files such as public key,private key and signature file in firmware,designs a model to verify the validity of certificate contents,builds a certificate management database,and implements a complete firmware security detection system.The experimental results show that the system can effectively identify and validate the certificates in the firmware,and successfully detect the firmware with security defects of digital certificates outside the samples.